I have observed that the recent releases of Quirky and Wary come with Firewalls by default - did Barry see this coming?_________________Thanks! DavidHome page: http://nevils-station.comDon't googleSearch!http://duckduckgo.com
Puppy Carolina 1.3 & Lighthouse64-b602 & JL64-603

It is specifically Unreal3.2.8.1.tar.gz on a small subset of mirror sites, and not particularly a Gentoo problem but any distro that includes the Unreal Tournament IRC server. The sad part is it has been there for several months and was just now noticed; the good news is that as soon as it was noticed, the corrupt version of that file was removed and replaced with a clean copy. So that's not a "shame on Gentoo" problem; it's a shame on the maintainers of the Unreal mirrors.

If what I'm understanding is correct, the problem was with the people distributing the Unreal source code. It was some of their mirrors that were compromised, and they were the idiots that weren't signing their files with PGP. Without the PGP signature the people at Gentoo had no way of realizing that the source code was tainted. The Gentoo folks then distributed the compromised file from their trusted (but insecure) source code provider.

It should also be noted that this would only affect people that installed Unreal. It wasn't actually included with the base distro (with Gentoo the kernel isn't even included with the base distro, you have to compile it yourself). Since Gentoo distributes only source code and does not have binaries on their servers, there was no way for a virus scanner to catch the corrupted files.

I suppose the folks at Gentoo shouldn't have used an unsigned file, but I don't think that I would have considered the possibility of the official Unreal mirrors distributing bad code so I can't really bash them.

Constant vigilance!_________________Be brave that God may help thee, speak the truth even if it leads to death, and safeguard the helpless. - A knight's oath

I have observed that the recent releases of Quirky and Wary come with Firewalls by default - did Barry see this coming?

In fact ALL official releases since 4.12 (at least) have the firewall installed and on by default. That certainly was the case with 4.2x releases, and I'm pretty sure it is true of 4.3x too._________________Actions speak louder than words ... and they usually work when words don't!
SIP:whodo@proxy01.sipphone.com; whodo@realsip.com

I've wondered about this lately myself. I always use the firewall wizard when configuring a new Puppy or using pfix=ram., but note that:

1. whether your use the "automatic" or the "default" method, the result seems to be the same

2. there's no indication whether it's running or not, as promised by the displayed messges.

3. there's no indication of any method of turning it off, should you wish to use another firewall or no firewall at all. To believe the display, once configured and saved, it will start at bootup every time.

So while I'm not sure what to believe now - is the firewall on by default or not? And can it be turned off once saved to the 2fs file?

There are numerous menus in Puppy that appear to respond to user input, but in the end achieve nothing. They have not been functional for years, if ever, and simply have never been removed or fixed._________________otropogo@gmail.com facebook.com/otropogo

3. there's no indication of any method of turning it off, should you wish to use another firewall or no firewall at all. To believe the display, once configured and saved, it will start at bootup every time.

So I'm not sure what to believe now - is the firewall on by default or not? And can it be turned off once saved to the 2fs file?

There are numerous menus in Puppy that appear to respond to user input, but in the end achieve nothing. They have not been functional for years, if ever, and simply have never been removed or fixed._________________otropogo@gmail.com facebook.com/otropogo

Somebody complained about me writing Europe. But I failed to find where to correct it.

The mods told me it is allowed to change username as long as one don't use such change for trolling or anything bad.

As you say my avatar would reveal me but most revealing is my writing style.

None else are as naive in their posting as me. Unfortunately for me I have no way to pretend to be somebody else. my body automatically write in my style even if I try to be like everybody else. Hopeless case._________________I use Google Search on Puppy Forum
not an ideal solution though

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot vote in polls in this forumYou cannot attach files in this forumYou can download files in this forum